[SOLVED] Bind9 won't start

[NateMan]

I'm setting up a server using the ubuntu 8.04 perfect server guide, and I got to the section where you start bind9 after stopping it. I'm getting errors in my syslog. Here's the section with the errors. I believe it is something to do with permissions, but not sure why. Any help would be greatly appreciated.

May 19 20:36:36 atlas named[6398]: starting BIND 9.4.2 -u bind -t /var/lib/named
May 19 20:36:36 atlas named[6398]: found 1 CPU, using 1 worker thread
May 19 20:36:36 atlas named[6398]: loading configuration from '/etc/bind/named.conf'
May 19 20:36:36 atlas named[6398]: none:0: open: /etc/bind/named.conf: permission denied
May 19 20:36:36 atlas named[6398]: loading configuration: permission denied
May 19 20:36:36 atlas named[6398]: exiting (due to fatal error)
May 19 20:36:36 atlas kernel: [38722.446742] audit(1211247396.427:2): type=1503 operation="inode_permission" requested_mask="r::" denied_mask="r::" name="/var/lib/named/etc/bind/named.conf" pid=6399 profile="/usr/sbin/named" namespace="default"

[bluefrog]

silly question but have you checked /etc/bind/named.conf ownership and permissions?

[NateMan]

I have, it seems that everyone should be able to read the file, does it need to have write/execute privileges as well? Here's the ls -la for that:

-rw-r--r-- 1 bind bind 907 2008-04-09 14:42 /etc/bind/named.conf

I'm afraid this is the first time bind9 has actually given me a problem.

[bluefrog]

mine is
-rw-r--r-- 1 root bind /etc/bind/named.conf

user not being root is not your problem though. Sorry I am at a loss here.

[NateMan]

Perhaps I should clear it off the machine and reinstall it from there?

[Dr Small]

It is worth a shot. But, try changing ownership first and check the rest of the files in there also. If you need to change ownership, use:

sudo chown root:bind /etc/bind/named.conf

[volkswagner]

I am in the middle of following the perfect setup myself. It has the user modify some things.

Edit the file /etc/default/bind9 so that the daemon will run as the unprivileged user bind, chrooted to /var/lib/named. Modify the line: OPTIONS="-u bind" so that it reads OPTIONS="-u bind -t /var/lib/named":



Create the necessary directories under /var/lib:

mkdir -p /var/lib/named/etc
mkdir /var/lib/named/dev
mkdir -p /var/lib/named/var/cache/bind
mkdir -p /var/lib/named/var/run/bind/run

Then move the config directory from /etc to /var/lib/named/etc:

mv /etc/bind /var/lib/named/etc

Create a symlink to the new config directory from the old location (to avoid problems when bind gets updated in the future):

ln -s /var/lib/named/etc/bind /etc/bind

Make null and random devices, and fix permissions of the directories:

mknod /var/lib/named/dev/null c 1 3
mknod /var/lib/named/dev/random c 1 8
chmod 666 /var/lib/named/dev/null /var/lib/named/dev/random
chown -R bind:bind /var/lib/named/var/*
chown -R bind:bind /var/lib/named/etc/bind

Here is the error I get.

/etc/init.d/bind9 restart
 * Stopping domain name service... bind                                         rndc: connect failed: 127.0.0.1#953: connection refused

/var/log/syslog

found 1 CPU, using 1 worker thread
May 21 18:38:25 Gail named[5359]: loading configuration from '/etc/bind/named.conf'
May 21 18:38:25 Gail named[5359]: none:0: open: /etc/bind/named.conf: permission denied
May 21 18:38:25 Gail named[5359]: loading configuration: permission denied
May 21 18:38:25 Gail named[5359]: exiting (due to fatal error)
May 21 18:38:25 Gail kernel: [ 2999.652630] audit(1211409505.327:2): type=1503 operation="inode_permission" requested_mask="r::" denied_mask="r::" name="/var/lib/named/etc/bind/named.conf" pid=5512 profile="/usr/sbin/named" namespace="default"
May 21 18:41:09 Gail named[5415]: starting BIND 9.4.2 -u bind -t /var/lib/named

Here are some of my permissions

ls -alt /etc/bind/named.conf
-rw-r--r-- 1 bind bind 907 2008-04-09 15:42 /etc/bind/named.conf
ls -alt /var/lib/named/etc/bind/named.conf
-rw-r--r-- 1 bind bind 907 2008-04-09 15:42 /var/lib/named/etc/bind/named.conf

[volkswagner]

It is working now. I am not sure if it was fixed simply by restarting the pc. I did make one change to the system. I am not sure how this would affect it. I had an error during earlier config. I have two sites I am working on. One is a test site, the other is currently hosted outside my lan.

I used in in my /etc/host the test site. When I ran

echo server1.example.com > /etc/hostname

I incorrectly inserted the wrong host name (my other site, hosted outside my lan).

So now I continue the install/config.

[NateMan]

Sounds like a restart would be worth a shot. I'm rebooting it now. Unfortunatly, I'm not near it so hopefully it will go well... (crosses fingers). My permissions are almost identical to yours. I'm not going to change it to root, as I think that would probably break it even more. It is fully setup to be run as bind.

[NateMan]

Restart fixed the problem just fine! Thanks for the advice.